3 ms·
Those bugs could be buffer overruns or similar security problems. Just because the program appears to work doesn't mean it should be used.
by brian-armstrong 10y ago
Those bugs could be buffer overruns or similar security problems. Just because the program appears to work doesn't mean it should be used.
- andrewchambers 10y agoThey could be, or they could be nothing, and the program might not even be exposed to untrusted input anyway. We can have a discussion about perhaps splitting programs into security classes, though I would prefer the upstream people use the cutting edge security analysis, then backport patches with security advisories.